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Top Stories 

• Microsoft and the FBI have disabled around 1,000 of the 1,400 botnets created by the 
Citadel botnet malware that have stolen more than $500 million. - The Register (See item 

8 ) 

• A Target employee who works at pharmacies in San Leandro and Hayward, California, 
possibly exposed customers to Hepatitis A via drugs. - Food Safety News (See item 19 ) 

• Testimony to Congress stated that at least eight foreign-sponsored organizations have 
hacked into Veterans Affairs computer networks and that attacks are continuing. - 
Associated Press (See item 25) 

• Six individuals were killed and 13 were injured in a four- story building collapse in 
Philadelphia. - Associated Press (See item 42) 
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Energy Sector 



1. June 6, Wheeling News-Register/ Wheeling Intelligencer - (Ohio) Bring dumping 
investigated. Harch Environmental Resources was ordered to stop its operations in 
Ohio after an inspector found evidence the company dumped brine illegally at a 
Belmont County farm May 16. The Ohio Department of Natural Resources found soil 
and water samples from the farm contained high levels of chlorine and sodium, and 
immediately began containment and remediation efforts on the property. 

Source: http://www.theintelligencer.net/page/content.detail/id/586261/Brine-Dumping- 
Investigated.html?nav=5 1 5 

2. June 5, U.S. Department of Labor - (Colorado) US Labor Department’s OSHA cites 
Community Power Corp. in Morrison, Colo., for exposing workers to amputation 
hazards; fines total $66,990. Community Power Corp. in Morrison was cited by the 
U.S. Department of Labor’s Occupational Safety and Health Administration for two 
safety violations and fined $66,990 after an employee suffered a serious injury in 
February. A piece of equipment unexpectedly began operating and caught the 
employee’s leg prompting officials to conduct an investigation. 

Source: 

http://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEAS 
ES&p id=24144 

3. June 5, Associated Press - (Ohio) 7 indicted for copper thefts from Ohio power 
sites. Officials in Ohio indicted seven men of arranging or carrying out 25 thefts and 
five theft attempts of copper at about two dozen electrical substations owned by 
Cleveland Public Power and FirstEnergy Corp. The thefts occurred between January 
and May and authorities allege the men sold the copper to scrap yards and pocketed 
over $15,000. 

Source: http://www.middletowniournal.com/ap/ap/crime/7-indicted-for-copper-thefts- 
from-ohio-power-sites/nYCkH/ 

T Return to top i 

Chemical Industry Sector 

4. June 5, WRHI 1340AM Rock Hill - (South Carolina) 70 employees evacuated from 
Rock Hill manufacturing plant. Approximately 70 employees from SEM Products 
Inc. were evacuated from a Rock Hill facility after an employee inadvertently mixed 
two resins that led to a smoke-like plume of gas coming from inside the plant. 
Authorities spent several hours responding to the incident as gas coming from the 
epoxy mixture dissipated from the building. 

Source: http://www.wrhi.com/2013/06/70-employees-evacuated-from-rock-hill- 
manufacturing-plant-79667 
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Nuclear Reactors, Materials, and Waste Sector 



5. June 6, Nuclear Street - (Tennessee) NRC comes down on TVA for flood plans at 
two nuclear plants. The U.S. Nuclear Regulatory Commission issued one ‘yellow’ and 
two ‘white’ findings at the Watts Bar nuclear power plant and ‘white’ findings at the 
Sequoyah nuclear power plant due to lack of measures to prevent flooding in the event 
of dam failure at the two plants operated by the Tennessee Valley Authority. 

Source: 

http://nuclearstreet.com/nuclear power industry news/b/nuclear power news/archive/ 
2013/06/06/nrc-comes-down-on-tva-for-flood-plans-at-two-nuclear-plants-060601.aspx 

6. June 5, Kennewick Tri-City Herald - (Washington) Birds at Hanford vit plant spread 
contaminated waste. Work stopped at an under-construction plant at the Hanford Site 
after a small amount of soil contaminated with low level radioactive substances was 
found in a bird nest. Work was planned to resume the next day. 

Source: http://www.tri-citvherald.com/2013/06/05/2423007/birds-at-hanford-vit-plant- 
spread.html 

T Return to top i 

Critical Manufacturing Sector 

7. June 5, Rochester Democrat and Chronicle - (New York) Maracle Co. pleads guilty 
in explosive-waste dumping case. The U.S. Attorney’s Office in Buffalo reported 
Maracle Industrial Finishing Co. and its general manager could face up to $500,000 in 
fines and its general manager faces up to 6 months in prison after pleading guilty to 
intentionally dumping industrial waste, including explosive into the Webster village 
sewer system. 

Source: http://www.democratandchronicle.com/article/20130605/NEWS01/306050063 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

8. June 6, The Register - (International) Microsoft and FBI storm ramparts of Citadel 
botnets. Microsoft and the FBI have disabled around 1,000 of the estimated 1,400 
botnets created by the Citadel botnet malware that have stolen more than $500 million. 
Microsoft also filed suit against the alleged controller of the botnet, and the FBI is 
working with law enforcement in various countries to identify the botmaster and 8 1 bot 
herders. 
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Source: 

http://www.theregister.co.uk/2013/06/06/microsoft feds breach citadel botnets/ 

9. June 5, Pittsburgh Post-Gazette - (Pennsylvania) Adams man pleads guilty to bank 
fraud, money laundering. An Adams man pleaded guilty to bank fraud and money 
laundering totaling $1.8 million based on a fraudulent plan to buy two loan closing 
companies. 

Source: http://www.post-gazette.com/stories/local/neighborhoods-north/adams-man- 
pleads-guiltv-to-bank-fraud-monev-laundering-690431/ 

10. June 5, Associated Press - (National) CFTC sues US Bank over Peregrine Financial 
fraud. The U.S. Commodity Futures Trading Commission filed suit against U.S. Bank 
National Association for allegedly handling accounts for Peregrine Financial in an 
improper manner. The CEO of Peregrine Financial used those accounts in a $215 
million fraud scheme. 

Source: http://www.businessweek.com/ap/2013-06-Q5/cftc-sues-us-bank-over- 
peregrine-financial- fraud 
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Transportation Systems Sector 

11. June 6, KMA 960AM Shenandoah - (Iowa) Fatality accident near Hastings. A fatal 
accident closed Highway 34 east of 35th Street and northwest of Hastings for several 
hours. 

Source: http://kmaland.com/04369 FULL ACCIDENT DETAILS 054710.asp 

12. June 6, WBNS 10 Columbus - (Ohio) S.R. 315 reopens after tractor trailer crash. A 
crash involving a semi-truck shut down State Route 315 southbound at Kinnear Road 
near downtown Columbus for around 2 hours. 

Source: http://www.10tv.com/content/stories/2013/06/06/columbus-semi-accident- 
315.html 

13. June 5, Associated Press - (Arkansas) Bridge over 1-30 in Little Rock damaged, 
closed. A truck hauling a backhoe hit support beams of the Stanton Road bridge over 
Interstate 30 in Little Rock and damaged supports that hold up the structure, prompting 
authorities to close the overpass until the damage could be assessed and repaired. 
Source: http://www.knoe.com/story/22514736/bridge-over-i-30-in-little-rock-damaged- 
closed 

14. June 5, Associated Press - (Indiana) E. Ind. road closures to go on for thinner 
cleanup. Authorities closed lanes on State Road 44 in Connersville after an overturned 
tanker spilled 2,700 tons of paint thinner. The road was expected to remain closed for 
weeks to replace a water line that runs under the highway in the vicinity of the spill. 
Source: http://www.foxl9.com/story/22512307/e-ind-highwav-remains-closed-after- 
tanker-crash 



- 4 - 



15. June 5, KXTV 10 Sacramento - (California) Fatal accident involving motorcyclist 
closes NB Hwy. 99 in Tulare. Both northbound lanes of Highway 99 in Tulare were 
closed for nearly 2 hours after a fatal accident involving a motorcyclist. 

Source: http://www.news 10.net/news/article/247482/2/Fatal-accident-invol ving- 
motorcyclist-closes-NB-Hwv-99-in-Tulare 

16. June 5, Ashland Times-Gazette - (Ohio) Fertilizer spill closes Ohio 60 for five hours. 
Authorities closed Ohio 60 at County Road 1600 for more than 5 hours after a tank 
holding liquid nitrogen burst while being towed to a cornfield and spilled 1,000 gallons 
of the fertilizer onto the road. 

Source: http://www.times-gazette.com/latest%20headlines/2013/06/Q5/fertilizer-spill- 
closes-ohio-60-for-five-hours-t-g-sneak-peek 

17. June 5, Albany Times Union - (New York) Washout closes key upstate road. A 
torrent of water and debris washed out a large section of Route 1 1 in Warren County 
after a beaver dam broke. Work crews closed the road connecting State Route 9N and 
the Northway for several hours. 

Source: http://www.timesunion.com/local/article/Washout-closes-key-upstate-road- 
457972 l.php 

18. June 5, NewsOn6 Tulsa - (Oklahoma) Huge sinkhole in Midwest city swallows one 
lane of Highway 62. Major flooding caused an erosion hole on one lane of State 
Highway 62 in Midwest City. Officials expected it would take 5 to 6 weeks to repair 
the hole and the highway. 

Source: http://www.newson6.com/storv/22514057/huge-sinkhole-in-rnidwest-city- 
swallows-one-lane-of-highway-62 
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Food and Agriculture Sector 

19. June 6, Food Safety News - (California) Hepatitis A outbreak sickens Target 
Pharmacist; Customers may have been exposed. A Target employee who works at 
pharmacies in San Leandro and Hayward possibly exposed customers to Hepatitis A 
via drugs prepared between May 5 and May 24. 

Source: http://www.foodsafetynews.com/2013/06/hepatitis-a-outbreak-sickens-target- 
pharmacist-customers-may-have-been-exposed/ 

20. June 6, Food Safety News - (North Carolina) NC Holiday Inn Salmonella outbreak 
declared over at 103 cases. The Cumberland County Department of Public Health 
reported that no new cases of Salmonella have surfaced in Fayetteville since May 15, 
indicating the outbreak linked to the Holiday Inn Bordeaux has likely come to an end. 
Source: http://www.foodsafetvnews.com/2013/06/nc-holiday-inn-salmonella-outbreak- 
declared-o ver- at-103-cases/ 
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21. June 5, U.S. Food and Drug Administration - (Louisiana) Creole and Company, LLC 
issues allergy alert on undeclared milk, soy, and wheat in Creole Bisque. 3.47 
ounce packages of Creole Bisque are being recalled by Creole & Company, LLC. 
because they contain milk, soy, and wheat and were distributed without the ingredient 
statement which declares their presence. 

Source: http://www.fda.gov/Safety/Recalls/ucm35543 1 .htm 

22. June 5, Food Safety News - (National) Colorado reports 12 cases part of multistate 
Hepatitis A outbreak; San Diego reports 5. According to the Colorado Department 
of Public Health and Environment, twelve of the 49 people sickened in an ongoing 
multistate Hepatitis A outbreak are Colorado residents. Five San Diego County, 
California, residents were sickened as part of the outbreak as well. 

Source: http://www.foodsafetvnews.com/2013/06/colorado-reporting-12-cases-part-of- 
multistate-hepatitis-a-outbreak/ 

23. June 4, Associated Press - (Idaho) Idaho cheese company, EPA reach settlement. 
The U.S. Environmental Protection Agency and the Jerome Cheese Company reached a 
settlement ordering the cheesemaker paying $304,000 in fines for dumping pollutants 
into the Snake River above discharge limits in violation of the Clean Water Act. 

Source: http://www.khq.com/story/22500373/idaho-cheese-companv-epa-reach- 
settlement 
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Water and Wastewater Systems Sector 

24. June 5, U.S. Environmental Protection Agency - (South Carolina) EPA files complaint 
against Timmonsville, S.C. for water violations. The Town on Timmonsville, South 
Carolina was asked by the U.S. Environmental Protection Agency (EPA) and the South 
Carolina Department of Health and Environmental Control June 5 to address 
substantial risks to human health posed by raw sewage and partially-treated wastewater 
discharges in a wastewater and drinking water violation complaint. The Town of 
Timmonsville received two administrative complaints from the EPA on its failure to 
properly operate and maintain its wastewater system among other deficiencies. 

Source: 

http://vosemite.epa.gOv/opa/admpress.nsf/0/fffccfl3c9el0a8985257b81005825157Qpe 

nDocument 



For another story, see item 7 
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Healthcare and Public Health Sector 

25. June 4, Associated Press - (National) Department of Veterans Affairs hacking 
includes at least eight organizations, official says. A former U.S. Department of 
Veterans Affairs computer security chief told Congress June 4 that at least eight 
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foreign- sponsored organizations have hacked into Veterans Affairs computer networks 
and that attacks are continuing. The entire database contains personally identifiable 
information on roughly 20 million veterans that could be used in identity theft or other 
purposes. 

Source: http://www.huffingtonpost.com/2013/06/04/department-veterans-affairs- 
hacking n 3385623.html 
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Government Facilities Sector 

26. June 6, KSHB 41 Kansas City - (Missouri) Residents and school evacuated after 
Kansas City gas line break. Ingels Elementary School students were transported to 
Ruskin High School for classes June 6 after a broken gas line prompted the evacuation 
of the elementary school and a south Kansas City, Missouri neighborhood. 

Source: http://www.kshb.com/dpp/news/local news/residents-and-school-evacuated- 
after-kansas-city-gas-line -break 

27. June 5, Softpedia - (Massachusetts) Malware identified on University of 
Massachusetts Amherst computers. The University of Massachusetts Amherst 
notified 1,670 patients from their Center of Language, Speech and Hearing after a 
malicious program was found on a workstation April 5. The malware may have 
compromised patient health information including Social Security numbers and 
insurance information. 

Source: http://news.softpedia.com/news/Malware-Identified-on-Universitv-of- 
Massachusetts-Amherst-Computers-358678.shtml 

28. June 5, New York Post - (New York) Kids evacuated after fire breaks out at 
Brooklyn school. Students were evacuated and dismissed June 5 from Satellite West 
Middle School in downtown Brooklyn after a fire began in the building. Firefighters 
quickly extinguished the blaze. 

Source: 

http://www.nvpost.eom/p/news/local/brooklyn/kids evacuated after fire breaks WZS 
8tOOKCvh9VGXdnlBbSO 

29. June 5, WBAL-TV 11 Baltimore - (Maryland) Several injured in Ellicott City school 
bus collision. Nine people were sent to the hospital with minor injuries after a 
Centennial Lane Elementary School bus was involved in a three- vehicle collision June 
5 in Baltimore. Police cited the bus driver during a preliminary investigation for failure 
to control speed to avoid a collision and negligent driving. 

Source: http://www.wbaltv.com/news/maryland/howard-county/several-iniured-in- 
ellicott-city-school-bus-collision/-/10137848/20432378/-/hmelyg/-/index.html 

30. June 5, Des Moines Register - (Iowa) Suspicious substance mailed to ISU deemed 
safe. The Iowa State Daily, the student newspaper for Iowa State University, was 
evacuated for several hours after a student received an envelope June 5 containing a 
suspicious substance. U.S. Postal Service officials determined the substance was 
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harmless after investigating. 

Source: 

http://www.desmoinesregister.com/article/20130606/NEWS/306060042/Suspicious- 

substance-mailed-to-ISU-deemed-safe?archive 
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Emergency Services Sector 

31. June 5, Oakland Tribune - (California) Oakland police headquarters closes again 
for cleanup after flooding. Oakland Police Department officials closed their 
headquarters after reopening the building to the public for 2 hours June 5, due to 
lingering odor and eye irritation complaints. Flooding discovered June 4 forced the 
closure of the facility to the public as crews worked to clean the damage. 

Source: http://www.mercurvnews.com/breaking-news/ci 233933 1 6/oakland-police- 
headquarters-reopened-after- flooding-damage 

32. June 5, KHOU 11 Houston - (Texas) Thieves ransack volunteer fire department in 
Liberty County. Officials are investigating a theft at the Moss Bluff Volunteer Fire 
Department station in Fiberty County. Several items were stolen including radiators 
from every fire engine and rescue vehicle, brass fittings, batteries, pumps, and ladders. 
Source: http://www.khou.com/news/crime/Thieves-ransack-volunteer-fire-department- 
in-Fiberty-County— 21033255 1 .html 
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Information Technology Sector 

33. June 6, Softpedia - (International) Expert finds XSS flaws on Intel, HP, Sony, 
Fujifilm and other websites. A researcher identified cross-site scripting (XSS) 
vulnerabilities on the Web sites of several major companies in the information 
technology and entertainment industries. 

Source: http://news.softpedia.com/news/Expert-Finds-XSS-Flaws-on-Intel-HP-Sonv- 
Fujifilm-and-Other-Websites-358937.shtml 

34. June 6, Threatpost - (International) ISC patches known BIND 9 DOS vulnerabilities. 
Internet Systems Consortium (ISC) published a security update for their BIND 9 
domain system protocol software that addresses a remotely exploitable denial of service 
(DOS) vulnerability. 

Source: http://threatpost.com/isc-patches-known-bind-9-dos-vulnerabilitv/ 

35. June 6, Softpedia - (International) 64% of data breaches caused by human and 
system errors, study finds. Symantec and the Ponemon Institute released their 2013 
Cost of Data Breach Study that finds that 64 per cent of data breaches were due to 
human and system errors, among other findings. 

Source: http://news.softpedia.com/news/64-of-Data-Breaches-Caused-by-Human-and- 
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System-Errors-Study-Finds-3587 1 1 .shtml 



36. June 5, IDG News Sendee - (International) Malware increasingly uses peer-to-peer 
communications, researchers say. Security firm Damballa reported that malware’s 
use of peer-to-peer (P2P) communications increased fivefold over the past year. 

Source: 

http://www.computerworld.eom/s/article/9239834/Malware increasingly uses peer to 
peer communications researchers say 

37. June 5, SC Magazine - (International) One month after recent Java update, 7 
percent of users patched. Researchers at Websense found that one month after an 
April Java update, only seven percent of users had upgraded to the latest version, 
leaving the rest vulnerable to known exploits. 

Source: http ://w w w . semagazine .com/one-month-after-recent-i ava-update-7 -percent-of- 
users-patched/article/29643 1/ 



For additional stories, see items 8,25, and 27 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 

38. June 5, Blue Ridge Muse - (Virginia) The data, web and TV service outage at 
Citizens continues. Floyd County residents and customers of Citizens Telephone 
Cooperative lost Internet and television services in an outage which has lasted more 
than 24 hours with no reported time for service restoration. 

Source: http://www.blueridgemuse.com/node/18443 

39. June 3, KWWL 7 Waterloo - (Iowa) New backup CenturyLink fiber network in 
Dubuque to prevent outages. Dubuque residents were reassured June 5 that 
telecommunications services from CenturyFink would be more reliable after 68 miles 
of backup fiber optic network was installed and would serve as a redundant network. 
CenturyFink invested $2.3 million in the efforts following a June 2012 outage which 
affected emergency services, phone, and Internet services for thousands of its 
customers for 4 hours. 

Source: http://www.kwwl.com/storv/22512838/2013/06/05/new-backup-centurylink- 
fiber-network-in-dubuque-to-prevent-outages 
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Commercial Facilities Sector 

40. June 6, Odessa American - (Texas) OFD: Two severely injured in High Plains 
Apartments explosion. A June 5 two-alarm fire at the 12-unit High Plains Apartment 
complex in Odessa led to two people being severely injured. The fire, which spread to 
three other apartments, is being investigated by the Odessa Fire Department after 
several reports of explosions were received. 

Source: http://www.oaoa.com/news/fire and rescue/article a2fc07a0-ce65-lle2-8861- 
0019bb30f31a.html 

41. June 6, Associated Press; WYMT 57 Hazard - (Kentucky) Fire destroys farms store, 
forces wide evacuation. Investigators are looking into a June 4 fire that destroyed the 
Salyersville Connelly Farm Service store and caused the evacuation of two dozen 
homes. 

Source: http://www.bgdailynews.com/news/state/fire-destroys-farm-store-forces-wide- 
evacuation/art i cle 356e309c-e324-5f4e-b245-6Sd8366d 1 b32.html 

42. June 6, Associated Press - (Pennsylvania) 6 confirmed dead, 13 injured in 
Philadelphia building collapse in Center City. Six individuals were killed and 13 
were injured in a four-story building collapse in downtown Philadelphia June 5. 

Source: 

http://www.ni.com/south/index.ssf/2013/06/one dead and 13 injured in phi.html 

43. June 5, Chicago Tribune - (Illinois) 14 displaced in Evanston apartment fire, 1 
injured. Firefighters responded to an Evanston apartment fire in Cook County that 
injured at least one and displaced 14 others. 

Source: 

http://www.chicagotribune.com/news/local/suburbs/evanston skokie morton grove/ch 
i- 1 4-displaced-in-evanston-apartment-fire- 1 -injured-20 1 30605,0,4092 158. story 

44. June 5, WMAQ 5 Chicago- (Illinois) 10 injured when gun accidentally fires in St. 
Charles Club. At least 10 people were injured in an accidental shooting at the St. 
Charles Sportsmen’s Club where a man mistakenly placed a shotgun shell into his 12- 
gauge shotgun which fired and ricocheted from the floor, hitting people inside the club. 
Source: http://www.nbcchicago.com/news/local/10-Iniured-When-Gun-Accidentally- 
Fired-in-St-Charles-Club-2 1 0267581 .html 



For another story, see item 45 
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Dams Sector 



45. June 6, Sandy Springs Patch - (Georgia) Storm damage/gas leak leads to evacuation 
of 100 apartment residents. An overnight storm caused damage to a dam and a gas 
leak in Sandy Springs, prompting the evacuation of residents from three buildings at 
The Falls at Sandy Springs Apartments June 6 as crews worked to pump water from the 
dam. 

Source: http://sandvsprings.patch.com/articles/storm-damage-gas-leak-leads-to- 
evacuation-of- 100-apartment-residents 

46. June 5, Sylva Herald - (North Carolina) Efforts under way to repair spillway, fill 
Balsam Lake. A U.S. Forest Service contractor was working to repair a crack in North 
Carolina’s Balsam Lake dam spillway June 5. The crack is located at the bottom of the 
splashboards. 

Source: http://www.thesylvaherald.com/news/article b6725142-cdf0-l Ie2-bc6c- 
001a4bcf6878.html 
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NTAS 



NO ACTIVE ALERTS 

www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 



- 12 - 




